Forum Discussion

StefanoC66's avatar
StefanoC66
Iron Contributor
Jun 10, 2025

PKIVIEW download error

We are deploying a 2-tier PKI with an offline Root CA and an Enterprise SubCA.

After deploying the Root CA with CRL and AIA pointing to a web server http://crl.company.com we copied there the Root CA's Certificate and CRL.
From the subordinate CA server we're able to open the publishing web site and load the crl and crt via Web browser.
However when using PKIVIEW to check the setup we saw a "Download error" for both the Root and Subordinate CA.

is there anyone that can help on this ?

thanks

 

certificate
Certificate issues
pkiview

1 Reply

Sort By
  • MChief99's avatar
    MChief99
    Copper Contributor
    Jun 10, 2025

    You will need to add a CNAME DNS record for the aia01 and crl01 to point to your respective internal intermediate ca and the IIS directory files for the crl and crt exists in the CertData folder.

Resources